CVE-2021-47755: Oliver Library Server v5 - Arbitrary File Download
Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive files from the server's filesystem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47755?
CVE-2021-47755 is classified as a high-severity vulnerability due to its potential for unauthorized access to sensitive system files.
How do I fix CVE-2021-47755?
To mitigate CVE-2021-47755, it's essential to sanitize user inputs and implement strict validation on the FileServlet endpoint.
Who is affected by CVE-2021-47755?
CVE-2021-47755 affects users of Oliver Library Server version 5.
What type of vulnerability is CVE-2021-47755?
CVE-2021-47755 is an arbitrary file download vulnerability that allows attackers to access system files.
Can CVE-2021-47755 be exploited without authentication?
Yes, CVE-2021-47755 can be exploited by unauthenticated attackers, making it particularly dangerous.